Privacy Policy — Mellow Family

1. Who we are

Mellow Family (“we,” “our,” or “us”) operates the Mellow Family platform at mellow.family and app.mellow.family. We provide a court-grade co-parent communication service that creates tamper-evident message records with cryptographic timestamps.

Questions about this policy may be directed to: privacy@mellow.family.

2. Information we collect

Account information

When you create an account we collect your email address and a hashed password. We do not collect your legal name, phone number, or payment information unless you provide it for a paid subscription.

Message content

Messages you send through Mellow Family are stored in our database. Message records are append-only and are never modified or deleted. This is a core design requirement of the service: the integrity of the record depends on its immutability. Before creating an account, please understand that messages you send cannot be retracted.

Metadata

We collect metadata associated with each message, including: timestamp (wall-clock and RFC 3161 timestamp response), sender identity, delivery state, SHA-256 hash, and whether the message used AI-assisted drafting.

Usage data

We collect standard server logs including IP addresses, browser type, referring URLs, and pages visited. This data is used to operate and improve the service and is not sold or shared with advertisers.

Payment information

If you subscribe to Mellow Family Power Tools, payment is processed by Stripe. We receive a Stripe customer ID and subscription status; we do not store your full credit card number, CVV, or billing address on our systems.

3. How we use your information

To provide, operate, and maintain the Mellow Family service
To generate cryptographically verifiable message records for use in legal proceedings
To send account confirmation, security, and service notification emails
To process subscription payments and manage your billing relationship
To analyze aggregate usage patterns and improve the platform
To comply with legal obligations, court orders, or valid legal process

We do not use your message content for advertising purposes. We do not sell, rent, or trade your personal information to third parties for marketing.

4. How we share your information

We do not sell your personal information. We may share information in the following limited circumstances:

Your co-parent: Messages you send are visible to the other party in your conversation, as intended by the service.
Legal process: We will disclose information in response to a valid court order, subpoena, search warrant, or other legally binding request. Where permitted, we will notify you before complying.
Service providers: We use Supabase (database hosting), Stripe (payments), Resend (transactional email), DigiCert/GlobalSign/Sectigo (trusted timestamping), and xAI (AI message coaching). Each processes data solely to perform their service function.
Business transfers: If Mellow Family is acquired or merged, your information may transfer to the acquiring entity, subject to the same privacy commitments.
Safety: We may disclose information to prevent imminent harm to a person or the public.

5. Data retention

Because Mellow Family provides court-grade records, message data is retained indefinitely as part of the immutable record. You may request account deletion at any time by emailing privacy@mellow.family. Account deletion removes your profile and login credentials; message content may be retained in anonymized form to preserve the integrity of the shared conversation record for the other party.

Server logs are retained for up to 90 days. Payment records are retained as required by applicable financial regulations.

6. Security

We use industry-standard security measures including TLS encryption in transit, encrypted database storage via Supabase, row-level security policies, and hashed passwords. Message integrity is protected by a SHA-256 hash chain that makes tampering cryptographically detectable.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at security@mellow.family.

7. Your rights

Depending on your location, you may have the following rights:

Access: Request a copy of the personal information we hold about you.
Correction: Request correction of inaccurate account information (e.g. your email address). Note that message content is immutable by design and cannot be corrected after sending.
Deletion: Request deletion of your account and associated profile data (subject to the retention policy for message records described above).
Portability: Request a machine-readable export of your data.
Objection / restriction: Object to or request restriction of certain processing activities.

To exercise any of these rights, email privacy@mellow.family. We will respond within 30 days.

8. Children’s privacy

Mellow Family is intended for use by adults (18 years and older). We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will delete it.

9. Cookies and tracking

We use session cookies to maintain your logged-in state. We do not use third-party advertising cookies or cross-site tracking. We do not use Google Analytics or similar advertising trackers.

10. International transfers

Mellow Family operates primarily in the United States. If you access the service from outside the US, your information may be transferred to and processed in the United States. By using the service, you consent to this transfer.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated “Last updated” date and, for significant changes, by sending an email to your registered address. Continued use of the service after any change constitutes your acceptance of the updated policy.

12. Contact

For privacy questions, requests, or complaints: privacy@mellow.family

For security issues: security@mellow.family